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TITLE 

SYSTEM AND METHOD FOR VIDEO STREAM ENCRYPTION 

BACKGROUND OF THE INVENTION 

Field of the Invention 

5 The present invention relates to digital video 

streaming, and more particularly to a method and system 
for video stream encryption. 



Description of the Related Art 

10 Digital video stream encryption systems have been 

used for access authentication. Fig. 1 is a diagram of a 
conventional digital video stream encryption system. An 
encryption application 11 receives video data video 1 to 
encrypt and outputs an encrypted video stream video 2 to 

15 a corresponding decryption application 12 via various 

media, such as microwave, internet, or cable. The 
decryption application 12 is responsible for decrypting 
the encrypted video stream video 2 to restore the 
original video stream video 1 . 

2 0 A digital video stream can be seen as a series of 

static frames, requiring considerable storage capacity 
and transmission bandwidth. A 90-min full color video 
stream, for example, having 640x480 pixels/frame and 15 
frames /second, requires bandwidth of 640x480 

25 (pixels/frame) x3 (bytes/pixel) xl5 (frames/sec) =13 . 18 (MB/sec 

) and file size of 13 . 18 (MB/sec) x90x60=69 . 50 (GB) . Such a 
sizeable digital video stream is difficult to store and 
transmit in real time, thus, many compression techniques 
have been introduced. 

3 0 MPEG standards ensure video encoding systems create 

standardized files that can be opened and played on any 
system with a standards -compliant decoder. Digital video 
contains spatial and temporal redundancies, which may be 
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compressed without significant sacrifice. MPEG coding is 
a generic standard, intended to be independent of a 
specific application, involving compression based on 
statistical redundancies in temporal and spatial 
directions. Spatial redundancy is based on the 

similarity in color values shared by adjacent pixels. 
MPEG employs intra- frame spatial compression on redundant 
color values using DCT (Discrete Cosine Transform) and 
quantization. Temporal redundancy refers to identical 
temporal motion between video frames, providing smooth, 
realistic motion in video. MPEG relies on prediction, 
more precisely, motion-compensated prediction, for 
temporal compression between frames. MPEG utilizes, to 
create temporal compression, I-Frames, B-frames and P- 
frames. An I- frame is an intra-coded frame, a single 
image heading a sequence, with no reference to previous 
or subsequent frames. MPEG-1 compresses only within the 
frame with no reference to previous or subsequent frames. 
P- frames are forward-predicted frames, encoded with 
re f erence to a previous I- or P- frame, with pointers to 
information in a previous frame. B-frames are encoded 
with reference to a previous reference frame, a 
subsequent reference frame, or both. Motion vectors 
employed may be forward, backward, or both. 

MPEG achieves compression by quantizing the 
coefficients produced by applying a DCT to 8x8 blocks of 
pixels in an image and through motion compensation. 
Quantization is basically division of the DCT coefficient 
by a quantization scale related to quality level, with 
higher indices for greater compression but lower quality, 
and lower indices for the reverse. 

In the past, conventional encryption techniques have 
normally encrypted entire compressed video stream, as 
have conventional decryption techniques. Several 
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inherent limitations exist in this process. First, 
encrypted video stream is unreadable without 
corresponding decryption, such that preview is 
unavailable. In addition, much time is spent encrypting 
and decrypting the entire video stream. 

In view of the limitations described, a need exists 
for a system and method of video stream encryption to 
provide both low quality digital video for preview and 
high quality encrypted stream for subsequent decryption, 
with reduced time spent encrypting and decrypting. 

SUMMARY OF THE INVENTION 

It is therefore an object of the present invention 
to provide a system and method of video stream encryption 
to provide both unencrypted low quality video for preview 
and encrypted supplementary data for subsequent 
decryption, enabling generation of high quality streaming 
video with reduced encryption and decryption time. 

The system according to the invention comprises 
encryption and decryption systems for video stream. The 
encryption system includes a storage device, a first 
compression application, an encryption application, and a 
second compression application. The storage device 

stores at least one quantization scale record, each 
constituent of which is an integer. In multilayer 

scales, a lower layer has a higher number than a higher 
layer. The first compression application compresses 
video data stream using motion prediction and discrete 
cosine transformation (DCT) , generating a compressed 
video for subsequent operations. The encryption 

application first receives the compressed video from the 
first compression application and reads at least one 
quantization scale from the storage device. The 
compressed video is quantized by a method associated with 
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the quantization scale to generate Q data and multilayer 
quantized supplementary data (QR data) thereof. Finally, 
the QR data for each layer is encoded using variable 
length coding (VLC) and encrypted for each layer. The 
second compression application inputs the Q data and 
encrypted QR data for each layer, encodes the Q data 
using VLC, combines the encoded Q data and encrypted QR 
data for each layer in an encrypted stream for transfer 
to the pre -decrypt ion application in the decryption 
system. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention can be more fully understood 
by reading the subsequent detailed description and 
examples with references made to the accompanying 
drawings , wherein : 

Fig. 1 is a diagram of a conventional digital video 
stream encryption system; 

Fig. 2 is a diagram of a system of video stream 
encryption according to the invention; 

Fig. 3 is a diagram of an exemplary quantization 
scale record according to an embodiment of the invention; 

Fig. 4 is a flowchart showing a method of video 
stream encryption according to the invention; 

Fig. 5 is a flowchart showing a method of video 
stream decryption corresponding to the encryption method 
of the invention; 

Fig. 6 is a diagram of a storage medium for a 
computer program providing the method of video stream 
encryption according to the invention; 

Fig. 7 is a diagram of a storage medium for storing 
^ rnmnutpr nmar^m nrnvidina a method of video stream 
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decryption corresponding to the encryption method of the 
invention. 
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DETAILED DESCRIPTION OF THE INVENTION 

Fig. 2 is a diagram of a system of video stream 
encryption according to the invention. The entire system 
includes an encryption system 21 and a decryption system 
5 22. The two systems can be implemented in separate 

computers or devices connected by a network such as Local 
Area Network (LAN) , Wide Area Network (WAN) , mobile 
network, Internet, or others. The encryption system 21 
can be implemented in a mainframe, workstation, server, 

10 personal computer, or other device. 

The encryption system 21 includes a storage device 
211, a first compression application 212, an encryption 
application 213 and a second compression application 214. 

The storage device 211 stores at least one 

15 quantization scale record, each constituent of which is 

an integer. Fig. 3 is a diagram of an exemplary 
quantization scale record containing three scales, 1,000, 
100, and 10. In multilayer scales, a lower layer has a 
higher number than a higher layer. The quantization 

2 0 scale record can be implemented in a database, file, 

predefined variable, or other form that can be loaded 
into memory for further processing. 

The first compression application 212 compresses 
video data stream using motion prediction and discrete 

2 5 cosine transformation (DCT) , generating a compressed 

video for subsequent operations. 

The encryption application 213 first receives the 
compressed video from the first compression application 
212 and reads at least one quantization scale from the 

30 storage device 211. The compressed video is quantized 

according to the quantization scale to generate Q data 
and multilayer quantized supplementary data (QR data) 
therefrom. Finally, the QR data for each layer is 
encoded using variable length coding (VLC) and encrypted 
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using symmetrical/asymmetrical encryption algorithm such 
as advanced encryption standard (AES) , RSA, data 
encryption standard (DES) , elliptic curve ciphers (ECC) , 
or others. 

A recursive program composed of pseudo codes is 
introduced in the following, using the code sequence: 
n = 0 

Integer FUNCTION qProcess ( Integer video) 
n = n + 1 
if (n <= N) 

D n = qProcess (video - (video DIV Q n ) xQ n ) 

else 

exit 

endif 

return (video DIV Q n ) 
END FUNCTION 

In which N denotes a number of layers, n denotes an 
index of layer current in process, DIV denotes an 
operation used to get a quotient, video denotes the 
compressed video data, D n denotes the Q data of layer n 
and Q n denotes the quantization scale of layer n. 

For example, if D 0 is 13,925 represents a compressed 
video data, and the quantization scale of three layers as 
shown in Fig. 3, Qi=l,000, Q 2 =100 and Q 3 = 10 for respective 
layers, qProcess is executed regarding D 0 as receive data, 
thereby generating results in sequence, D 3 =2, D 2 =9 and 
Di=13, in which Di represents Q data, and D 2 and D 3 
represent the QR data of layer 1 and layer 2 
respectively. Next, the encryption application 213 uses 
VLC to encode the QR data for each layer and one or two 
different encryption methods corresponding to the 
particular layer to encrypt the QR data. The encryption 
application 213 finally outputs the Q data and encrypted 
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QR data for each layer to the second compression 
application 214. 

The second compression application 214 inputs the Q 
data and encrypted QR data, encodes the Q data using VLC, 
combines the encoded Q data and encrypted QR data for 
each layer into an encrypted stream for transfer to the 
pre-decryption application 222 in the decryption system 
22 . 

The decryption system 2 2 includes a storage device 
221, a pre -decrypt ion application 222, a decryption 
application 223, and a post-decryption application 224. 
The storage device 221 stores the quantization scale 
record as that in the storage device 211. 

The pre-decryption application 222 receives the 
encrypted stream from the second compression application 
214, separates the encrypted stream into encoded Q data 
and encrypted QR data for each layer, uses VLD to restore 
the Q data, and outputs the Q data and encrypted QR data 
to the decryption application 223. 

The decryption application 223 decrypts and decodes 
the encrypted QR data using VLD to restore the QR data. 
The number of layers decrypted depends on authorized 
access, with layer complexity reflected in streaming 
quality. After that, Q data and QR data undergo inverse 
quantization to generate a compressed video. 

A program composed of pseudo codes in the decryption 
application 213 produces the compressed video data, 
utilizing the following code sequence: 

FUNCTION iqProcess (Integer D x , N, Dif [] ) 
D = D3.XQ1 
for i=2 to N 

D = D + (DifiXQi) 

Loop 
END FUNCTION 
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In which N denotes the number of layers decrypted, D 
denotes de-quantized data of layer 1, Difi de -quantized 
supplementary data of layer i, and Qi the quantization 
scale of layer i. 
5 Here, D=13, Diff 2 =9, Diff 3 =2 and the quantization 

scale for each layer is as shown in Fig. 3. The result 
D, the compressed video data, produced using the above 
program is 13,000 since there is no decryption 
authorization. In addition, D, 13,900 or 13,920, is 
10 produced since layer 2 or layer 3 QR data decryption is 

authorized respectively . 

The decryption application 223 outputs the 
compressed video undergoing decoding, de- quantization, 
and decryption to the post-decryption application 224. 
15 The post-decryption application 224 decompresses the 

compressed video using inverse discrete cosine 
transformation (IDCT) and motion compensation. 

Fig. 4 is a flowchart showing a method of video 
stream encryption according to the invention. 
2 0 First, in step S41, video data stream is compressed 

using motion prediction and discrete cosine 
transformation (DCT) , generating a compressed video for 
subsequent operations . 

In step S42, Q data is calculated using the 
25 quantization method associated with the quantization 

scale of layer 1. 

In step S43, QR data for each layer is calculated 
using qProcess associated with the quantization scales 
for each layer. 

30 In step S44, the QR data for each layer first is 

encoded using VLC method, and encrypted using one or two 
different encryption methods corresponding to the 
particular layer. 

In step S4 5, the Q data is encoded using VLC. 
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Fig. 5 is a flowchart showing a method of video 
stream decryption according to the invention. 

First, in step S51, the encoded Q data is decoded 
using the VLD method to restore the Q data. 

In step S52, the multilayer encrypted QR data is 
decrypted and decoded using VLD. The number of layers 
decrypted depends on authorized access. 

In step S53, the compressed video is restored using 
iqProcess associated with the multilayer quantization 
scales . 

In step S54, video is decompressed using inverse 
discrete cosine transformation (IDCT) and motion 
compensation . 

The methods and system of the present invention, or 
certain aspects or portions thereof, may take the form of 
program code (i.e., instructions) embodied in tangible 
media, such as floppy diskettes, CD-ROMS, hard drives, or 
any other machine -readable storage medium, wherein, when 
the program, code is loaded into and executed by a 
machine, such as a computer, the machine becomes an 
apparatus for practicing the invention. The methods and 
apparatus of the present invention may also be embodied 
in the form of program code transmitted over some 
transmission medium, such as electrical wiring or 
cabling, through fiber optics, or via any other form of 
transmission, wherein, when the program code is received 
and loaded into and executed by a machine, such as a 
computer, the machine becomes an apparatus for practicing 
the invention. When implemented on a general -purpose 
processor, the program code combines with the processor 
to provide a unique apparatus that operates analogously 
to specific logic circuits. The storage mediums are 
shown in Fig. 6 and Fig. 7. 
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The system and method of this invention provide both 
unencrypted low quality video for preview and encrypted 
supplementary data for subsequent decryption, enabling 
generation of high quality streaming video data, with 
5 reduced encryption and decryption time. 

Although the present invention has been described in 
its preferred embodiments, it is not intended to limit 
the invention to the precise embodiments disclosed 
herein. Those who are skilled in this technology can 
10 still make various alterations and modifications without 

departing from the scope and spirit of this invention. 
Therefore, the scope of the present invention shall be 
defined and protected by the following claims and their 
equivalents . 
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